Hi,
I guess the problem is that the first line of the stacktrace does not start with a space - it starts with a dash sign. There are multiple threads within this forum for multiline support (e.g. Filebeat multiline regexp patterns help). Please have a look there. In short:
- change the pattern to match your date-time at the start of the main line
- switch negate to true
Best regards
Wolfram